$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/5c834625-9800-3718-ba47-cf93c4317d4b.roa File: 5c834625-9800-3718-ba47-cf93c4317d4b.roa (raw, json) Hash identifier: EsWPPlz5rEJcChSM0jjGjBhJOoBm4Pd89TJOyN7qa4E= Subject key identifier: 90:AC:94:6D:B4:B6:F1:A7:38:48:6B:E6:DC:61:C7:AA:85:5A:61:B0 Certificate issuer: /CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe Certificate serial: 010D0C9F43285848A29B4B42905C1740F9ABA580 Authority key identifier: 3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/5c834625-9800-3718-ba47-cf93c4317d4b.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 20381 IP address blocks: 192.160.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4b:42:90:5c:17:40:f9:ab:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30eed87a-82d8-42e4-80c5-3a0409b7bbfe Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=416a2609-0b63-43c8-be99-257842f33dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8d:55:dc:c0:48:49:3a:38:1b:9d:57:6a:a1: 6d:52:3c:ce:66:b5:b3:c1:80:33:44:3e:0c:dc:d6: 7e:c4:dd:a0:a8:9e:01:e6:4b:3b:3f:eb:50:ea:af: fd:1c:a0:20:1f:96:76:08:72:dc:f5:65:c8:d8:b9: 28:06:a7:21:64:6b:61:fd:6b:7d:c9:d1:67:35:0d: a8:6c:03:8a:b6:14:fa:54:15:5f:7f:95:c0:6b:ee: cc:19:47:7b:93:d8:fe:bb:5f:db:26:82:a1:51:77: 26:c8:b1:0a:25:01:90:28:31:54:16:51:6d:4e:fc: 85:80:a1:b1:39:9f:ad:28:9e:ef:a1:db:14:96:83: 34:7c:67:7a:4c:cb:89:06:7d:6b:e9:51:e8:b5:3a: 21:6f:cd:60:2b:32:df:75:03:9f:a3:5b:8e:88:cf: a0:aa:e5:45:52:e4:49:1e:3c:02:ad:2a:e3:74:84: 89:ad:0c:65:25:41:55:90:81:79:be:dc:6a:fa:78: ee:c6:79:2a:96:6c:21:bc:96:13:91:f4:65:02:48: 1c:5c:04:bd:d6:39:e4:1c:9b:f9:5c:74:42:43:bd: 46:f6:68:0a:bb:51:7d:0a:8c:07:71:25:87:da:d2: c8:5a:16:dc:c5:12:e8:e4:be:73:a5:20:4f:83:d2: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AC:94:6D:B4:B6:F1:A7:38:48:6B:E6:DC:61:C7:AA:85:5A:61:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/5c834625-9800-3718-ba47-cf93c4317d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.crl X509v3 Authority Key Identifier: keyid:3A:9C:45:98:C4:8B:5F:4D:5D:B1:DF:F9:C3:17:6C:7B:BA:C7:EE:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/30eed87a-82d8-42e4-80c5-3a0409b7bbfe.cer sbgp-ipAddrBlock: critical IPv4: 192.160.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:96:a8:c0:42:15:2b:9d:3a:2b:2a:28:a0:12:62:8a:c9:1b: d8:37:f7:56:d1:2e:4d:b5:63:86:7f:71:e6:7e:c1:7c:49:e1: 08:58:e3:71:d9:7d:ae:d7:d8:0c:48:37:18:e8:c7:81:7d:d7: 27:02:5b:6a:bb:0f:f8:08:bc:31:d3:87:d0:2f:c0:db:35:4a: 2c:4e:73:66:78:2e:fb:f7:fd:a0:bd:2e:de:c1:06:d2:8e:99: 0e:53:6d:73:51:87:fd:51:29:02:34:b8:e7:bb:48:ac:d6:38: 51:3a:61:2a:08:e1:95:db:e0:f9:35:90:d3:f2:0d:1f:e1:ff: d5:49:b9:d0:a2:38:1c:2d:f4:ba:f3:3c:02:e9:b2:f1:61:6d: 06:2b:87:dd:bc:2b:74:6f:76:c4:c3:91:47:76:dd:98:a3:35: 5a:17:50:60:3a:c7:b2:09:4e:63:8d:48:82:c8:90:18:89:0f: 88:b9:19:5c:ab:31:1f:3e:c5:67:27:7d:95:6b:2c:59:7f:97: 9d:3c:f5:0e:55:30:d6:10:2d:e3:3f:59:36:d2:3b:27:a0:a0: 77:95:c6:f7:d9:bd:52:cf:37:1a:3c:d7:80:4a:90:0d:f8:07: e7:4d:a0:77:33:91:00:d1:61:91:54:35:fd:d2:c7:39:dd:46: 25:2b:85:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0tCkFwXQPmrpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBlZWQ4N2EtODJkOC00MmU0LTgwYzUtM2EwNDA5Yjdi YmZlMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk NDE2YTI2MDktMGI2My00M2M4LWJlOTktMjU3ODQyZjMzZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY1V3MBISTo4G51XaqFtUjzOZrWzwYAzRD4M 3NZ+xN2gqJ4B5ks7P+tQ6q/9HKAgH5Z2CHLc9WXI2LkoBqchZGth/Wt9ydFnNQ2o bAOKthT6VBVff5XAa+7MGUd7k9j+u1/bJoKhUXcmyLEKJQGQKDFUFlFtTvyFgKGx OZ+tKJ7vodsUloM0fGd6TMuJBn1r6VHotTohb81gKzLfdQOfo1uOiM+gquVFUuRJ HjwCrSrjdISJrQxlJUFVkIF5vtxq+njuxnkqlmwhvJYTkfRlAkgcXAS91jnkHJv5 XHRCQ71G9mgKu1F9CowHcSWH2tLIWhbcxRLo5L5zpSBPg9L/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCslG20tvGnOEhr5txhx6qFWmGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zMGVl ZDg3YS04MmQ4LTQyZTQtODBjNS0zYTA0MDliN2JiZmUvNWM4MzQ2MjUtOTgwMC0z NzE4LWJhNDctY2Y5M2M0MzE3ZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzBlZWQ4N2EtODJkOC00MmU0LTgw YzUtM2EwNDA5YjdiYmZlLzMwZWVkODdhLTgyZDgtNDJlNC04MGM1LTNhMDQwOWI3 YmJmZS5jcmwwHwYDVR0jBBgwFoAUOpxFmMSLX01dsd/5wxdse7rH7lMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zMGVlZDg3YS04MmQ4LTQyZTQtODBjNS0zYTA0 MDliN2JiZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+WqMBCFSudOisqKKASYorJG9g391bRLk21Y4Z/ceZ+wXxJ4QhY43HZ fa7X2AxINxjox4F91ycCW2q7D/gIvDHTh9AvwNs1SixOc2Z4Lvv3/aC9Lt7BBtKO mQ5TbXNRh/1RKQI0uOe7SKzWOFE6YSoI4ZXb4Pk1kNPyDR/h/9VJudCiOBwt9Lrz PALpsvFhbQYrh928K3RvdsTDkUd23ZijNVoXUGA6x7IJTmONSILIkBiJD4i5GVyr MR8+xWcnfZVrLFl/l5089Q5VMNYQLeM/WTbSOyegoHeVxvfZvVLPNxo814BKkA34 B+dNoHczkQDRYZFUNf3SxzndRiUrhX8= -----END CERTIFICATE-----Generated at Tue Apr 8 00:55:10 2025 by rpki-client